Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier: LaekaAujXL5Il/iAzd5pdCC9DeBeGCOgfE7jGORXNWg=
Subject key identifier: BE:E1:2E:FA:22:32:4D:C5:46:E0:58:FB:A7:9D:E8:4B:2F:A4:46:C5
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 0194BCA97D41B801C87378042287C93746DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number: 0959
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: AIyzCH7SWqDOYuCpfT+WJyGa9KznTQydxxfQljlPkMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7d:41:b8:01:c8:73:78:04:22:87:c9:37:46:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=bee12efa22324dc546e058fba79de84b2fa446c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:6a:de:d0:b2:73:24:07:a3:09:3b:d1:53:
77:d0:d6:54:1b:3b:e9:fd:0c:8f:bf:dd:ae:16:01:
19:b1:98:27:1b:ae:34:7e:eb:06:5b:1f:8b:92:4f:
b8:1d:53:5c:8d:f7:9d:83:b1:67:11:83:4c:db:c6:
6a:1b:f2:01:64:f2:a8:a1:ab:f6:c6:0b:4c:33:4f:
db:85:4b:a8:cb:3d:04:e0:6d:5b:62:a3:43:cf:b5:
4a:13:96:f8:80:17:3b:92:b2:0e:42:f2:99:03:39:
da:17:07:c9:71:ed:7a:be:61:07:9a:c8:06:4b:27:
9d:f6:30:bf:60:f0:af:d0:27:44:a2:d9:7a:d8:75:
6e:20:2c:f3:8c:e8:0b:5e:b2:a7:a0:e4:16:e4:34:
e4:de:76:2d:d1:dd:07:dc:a7:5d:7d:6b:21:7a:36:
65:41:0e:df:1e:9a:72:9a:e0:d0:94:4e:97:8e:95:
95:b3:36:06:4b:ac:83:35:b0:17:91:42:10:45:1d:
a8:ef:37:c7:9d:2b:69:91:a2:19:83:96:48:3e:6a:
9f:0d:7f:1b:22:92:83:14:b5:ea:75:69:1c:05:12:
9a:09:eb:71:f6:68:01:40:b4:6d:44:cb:14:c6:f9:
1f:e6:d8:26:e0:26:04:28:4f:a8:eb:09:51:ae:b0:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:2E:FA:22:32:4D:C5:46:E0:58:FB:A7:9D:E8:4B:2F:A4:46:C5
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:20:a1:08:ff:b0:06:a4:49:96:89:0a:b3:7d:61:95:d8:07:
5b:47:e2:03:17:cb:8e:2a:21:fc:e4:ae:1e:c1:10:87:ed:ba:
fd:14:7d:98:ce:71:a9:c0:cc:e3:74:a1:0b:d6:86:a9:1c:33:
79:ee:5e:b2:80:e9:23:90:92:e4:c1:6c:ae:98:df:9a:e6:6a:
02:3e:7f:21:72:af:4e:1e:f0:52:f1:ee:35:e4:63:27:a2:30:
6f:0b:b3:05:1e:68:51:f7:c6:7f:e4:69:7b:b8:fe:53:e6:27:
f3:5e:24:6a:c1:b9:67:8e:15:cc:e1:52:51:d5:57:e7:d0:78:
be:e5:a7:5c:83:8d:58:66:e9:b4:91:47:fa:8e:55:13:f8:32:
1c:14:e8:06:22:fa:a3:c5:f1:c1:e4:ba:55:d4:fd:93:be:9b:
80:f1:cb:69:fc:5e:3c:2d:b5:ef:96:05:d1:6b:8a:6d:cb:8c:
d9:89:26:48:64:74:d0:f7:c7:84:61:58:a0:17:d6:06:4c:25:
b4:28:c8:16:28:02:ed:77:15:9a:df:f9:ce:1e:9d:a2:80:49:
54:78:2a:bf:9e:c7:b9:76:5a:8e:3e:83:0a:78:94:26:ea:73:
ea:66:24:8d:c1:26:4a:b4:dd:9d:90:36:87:8a:04:7f:2e:d4:
06:ac:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:34 2025 by rpki-client